35 Commits

Author SHA1 Message Date
moebiusband 153ecb6dff Bound JWT token cache and document auth model
The per-handler JWT validation cache was never pruned, so a long-running
process accumulated one map entry per distinct rotating token, growing
without bound (a slow memory leak / DoS vector). Evict stale entries on
the cache-miss path and cap the cache at maxTokenCacheSize, clearing it
if eviction of expired tokens cannot free space.

Also document in the README that auth verifies only the token signature
and expiry (claims/roles are not enforced) and that an empty
jwt-public-key disables authentication entirely.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-13 10:44:06 +02:00
moebiusband bdf65b16a9 Upgrade dependencies. Prepare 1.5.0 release
Entire-Checkpoint: 37abb99fe6a7
2026-03-06 12:12:41 +01:00
moebiusband 0fa5d8bb8d Run go fix tool. Refactor 2026-03-04 11:07:05 +01:00
moebiusband 55475804f4 Update to lates cc-backend head
Entire-Checkpoint: 1f0df6df7655
2026-03-03 07:35:46 +01:00
moebiusband 3cc9420047 Merge branch 'dev' of github.com:ClusterCockpit/cc-metric-store into dev 2026-03-03 07:14:15 +01:00
moebiusband b764120501 Integrate entire. Upgrade dependencies 2026-03-03 07:13:15 +01:00
Christoph Kluge 4de275ac92 fix error conditional 2026-03-02 16:04:23 +01:00
Aditya Ujeniya ef3504dcd8 Update to the error handling 2026-03-02 13:37:35 +01:00
Aditya Ujeniya be6d4be9b9 Fix healthcheck api 2026-02-15 21:45:45 +01:00
moebiusband dd23f49364 Add configuration options and enable dynamic memory management through cc-backend callback 2026-01-28 12:59:05 +01:00
moebiusband 6aca448c18 Port to newest cclib. Use metricstore as library. 2026-01-26 09:59:29 +01:00
Christoph Kluge a868d99609 add error messages 2025-07-03 10:32:05 +02:00
Jan Eitzinger c3f6b9e33e Merge pull request #41 from ClusterCockpit/avro
Avro
2025-07-02 09:39:49 +02:00
Aditya Ujeniya 0fe634ec45 Fix to bugs for data consistency 2025-05-27 10:45:09 +02:00
Aditya Ujeniya aa0a3673f2 Fix to Avro features 2025-05-25 19:44:21 +02:00
Thomas Gruber 28fd7edc89 Fix subtype -> stype in lineprotocol.go 2025-05-08 18:01:02 +02:00
Aditya Ujeniya b53832a055 Initial commit for staging changes 2025-04-17 09:55:09 +02:00
Aditya Ujeniya e2e4dcdada feat: HealthCheck endpoint for nodes 2025-02-16 20:33:40 +01:00
moebiusband d48ba9f3c2 Merge branch 'main' into hotfix 2024-11-24 08:40:24 +01:00
Aditya Ujeniya bab4295a83 feat: support for ns,ms,us,s in lineprotol 2024-11-20 13:58:49 +01:00
moebiusband 7ee0a01eff Add hostname to error messages 2024-11-20 06:57:24 +01:00
Aditya Ujeniya 2d510b2890 Support for NATS Creds 2024-10-26 22:38:03 +02:00
moebiusband f301c759c3 Update and extend REST API descriptions 2024-10-23 16:13:20 +02:00
Christoph Kluge 4313098a38 add compatability api endpoints without trailing slashes 2024-09-30 16:26:47 +02:00
Aditya Ujeniya e8a5b2dce7 Versioning for query endpoint 2024-09-17 14:37:32 +02:00
Aditya Ujeniya 4ac6cef01f Update 2024-09-17 10:49:32 +02:00
Aditya Ujeniya b186dca79d Resampler implemented 2024-08-21 09:47:16 +02:00
moebiusband 6d5594a376 Change JWT Auth to Middleware Handler
Caveat: Cache is per endpoint
2024-06-26 05:31:28 +02:00
moebiusband 826658f762 Refactor. Add Swagger UI docs.
Change from Gorilla mux to net/http
2024-06-25 20:08:25 +02:00
moebiusband 7538570bc5 Cleanup 2024-06-18 07:27:27 +02:00
moebiusband 80518897cf Merge in refactored branch 2024-06-18 07:13:56 +02:00
moebiusband 5ca66aef87 Put token authentication in separate file 2024-05-06 15:40:22 +02:00
moebiusband fcc8eac2d5 Restructure and Cleanup
Compiles
2024-05-06 14:20:43 +02:00
moebiusband b2528f958c Continue restructuring. Intermediate state. 2024-05-06 09:27:28 +02:00
moebiusband e1e6694656 Intermediate state
Not working yet
2024-05-03 21:08:01 +02:00